Category: Security

[dos] NBMonitor 1.6.5.0 – 'Key' Denial of Service (PoC)

[webapps] CMSsite 1.0 – 'post' SQL Injection

[webapps] Webiness Inventory 2.3 – 'ProductModel' Arbitrary File Upload

[webapps] M/Monit 3.7.2 – Privilege Escalation

[webapps] ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting

[webapps] Apache CouchDB 2.3.0 – Cross-Site Scripting

[webapps] Comodo Dome Firewall 2.7.0 – Cross-Site Scripting

[dos] Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

[dos] Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in OpenTypeLayoutEngine::adjustGlyphPositions

[webapps] qdPM 9.1 – 'type' Cross-Site Scripting